Re: monitor traffic on host

[network_intern () someplace gov]

Kelly,

Use a toner to determine which port on the switch the guy is plugged into. Then set up a mirror port and forward all 
the traffic to an IDS box or whatever. 

BTW, I know for a fact that newer versions of Foundry IOS have a capability called sflow which forwards all traffic 
that goes across them to one centralized logging host. Maybe you should look into that? Cisco Catalyst switches have a 
similar capability, but I can't recall the name.

For sflow help, go into global config and type `sflow ?'

HTH,
--Anonymous Intern